bundle: Add postgres_databases resource (#5627)

## Changes

Add `postgres_databases` (Lakebase Postgres databases) as a bundle
resource for both the direct and Terraform engines: config type,
direct-engine CRUD, Terraform converter, JSON schema, test-server
handlers, and tests. Pairs with `postgres_roles`
([#5467](#5467)): a database is
owned by a Postgres role, so the create API requires `spec.role`.

- `parent` and `database_id` are recreate-only; the spec fields
`postgres_database` / `role` update in place.
- Drift detection for spec fields does not work until the backend
returns `spec` on GET (it currently returns only `status`).

## Tests

- Unit and acceptance tests (`basic`, `update`, `recreate`, `bind`,
`live_errors`).
- Verified against a real workspace: the acceptance suite passes on both
engines, and manual checks of the create error paths (missing `role`,
duplicate create) pass.

This pull request and its description were written by Isaac.

---------

Co-authored-by: Jan Rose <jan.rose@databricks.com>

Author: pietern

NEXT_CHANGELOG.md

@@ -21,7 +21,7 @@
 * engine/direct: Fix WAL corruption after two consecutive failed deploys ([#5606](https://github.com/databricks/cli/pull/5606)).
 * engine/direct: Don't open the deployment state WAL when a deploy's plan fails ([#5607](https://github.com/databricks/cli/pull/5607)).
 * Ignore unity catalog managed schema property defaults to avoid unnecessary drift ([#5195](https://github.com/databricks/cli/pull/5195)).
-* Add Postgres role as a bundle resource ([#5467](https://github.com/databricks/cli/pull/5467)).
+* Add `postgres_roles` and `postgres_databases` resources to create Postgres roles and databases on a Lakebase branch ([#5467](https://github.com/databricks/cli/pull/5467), [#5627](https://github.com/databricks/cli/pull/5627)).
 * direct: Stop spurious recreate/rename on redeploy when the backend normalizes a resource's name-based ID (e.g. Unity Catalog lowercasing a schema or volume name) ([#5599](https://github.com/databricks/cli/pull/5599)).
 * Fix the generated pipeline README to suggest `databricks bundle run <pipeline> --refresh <table>` for running a single transformation; the previously documented `--select` flag is not supported by `bundle run` ([#5252](https://github.com/databricks/cli/issues/5252)).
 

acceptance/bundle/deployment/bind/postgres_database/databricks.yml

@@ -0,0 +1,9 @@
+bundle:
+  name: test-bundle
+
+resources:
+  postgres_databases:
+    database1:
+      parent: projects/test-project/branches/main
+      database_id: test-database
+      postgres_database: app_db

acceptance/bundle/deployment/bind/postgres_database/out.test.toml

@@ -0,0 +1,32 @@
+
+>>> [CLI] bundle deployment bind database1 projects/test-project/branches/main/databases/test-database --auto-approve
+Updating deployment state...
+Successfully bound postgres_database with an id 'projects/test-project/branches/main/databases/test-database'
+Run 'bundle deploy' to deploy changes to your workspace
+
+>>> [CLI] bundle summary
+Name: test-bundle
+Target: default
+Workspace:
+  User: [USERNAME]
+  Path: /Workspace/Users/[USERNAME]/.bundle/test-bundle/default
+Resources:
+  Postgres databases:
+    database1:
+      Name: 
+      URL:  (not deployed)
+
+>>> [CLI] bundle deployment unbind database1
+Updating deployment state...
+
+>>> [CLI] bundle summary
+Name: test-bundle
+Target: default
+Workspace:
+  User: [USERNAME]
+  Path: /Workspace/Users/[USERNAME]/.bundle/test-bundle/default
+Resources:
+  Postgres databases:
+    database1:
+      Name: 
+      URL:  (not deployed)

acceptance/bundle/deployment/bind/postgres_database/output.txt

@@ -0,0 +1,6 @@
+DATABASE_NAME="projects/test-project/branches/main/databases/test-database"
+trace $CLI bundle deployment bind database1 "${DATABASE_NAME}" --auto-approve
+trace $CLI bundle summary
+
+trace $CLI bundle deployment unbind database1
+trace $CLI bundle summary

acceptance/bundle/deployment/bind/postgres_database/script

@@ -0,0 +1,18 @@
+Local = true
+Cloud = false
+
+Ignore = [
+    ".databricks"
+]
+
+[[Server]]
+Pattern = "GET /api/2.0/postgres/projects/test-project/branches/main/databases/test-database"
+Response.Body = '''
+{
+  "name": "projects/test-project/branches/main/databases/test-database",
+  "parent": "projects/test-project/branches/main",
+  "status": {
+    "postgres_database": "app_db"
+  }
+}
+'''

acceptance/bundle/deployment/bind/postgres_database/test.toml

@@ -0,0 +1,27 @@
+bundle:
+  name: test-bundle-$UNIQUE_NAME
+
+resources:
+  postgres_projects:
+    project:
+      project_id: test-pg-project-$UNIQUE_NAME
+      display_name: Test Postgres Project
+
+  postgres_branches:
+    branch:
+      parent: ${resources.postgres_projects.project.name}
+      branch_id: test-branch-$UNIQUE_NAME
+      no_expiry: true
+
+  postgres_roles:
+    owner:
+      parent: ${resources.postgres_branches.branch.name}
+      role_id: test-role-$UNIQUE_NAME
+      postgres_role: app_role
+
+  postgres_databases:
+    foo:
+      parent: ${resources.postgres_branches.branch.name}
+      database_id: test-database-$UNIQUE_NAME
+      postgres_database: app_db
+      role: ${resources.postgres_roles.owner.name}